The certification work has been performed by the Federal Office for Information Security (BSI),
the Common Criteria certification body of the German government and TÜViT Evaluation Body for IT
security which evaluates products worldwide according to the ITSEC and the Common Criteria (CC).

Microsoft Exchange Server 2003 EE certification report is
available for reading from the BSI website
and from this page.